KIFOX - The Search Portal for AI Applications ?

KIFOX is a portal for AI tools and LLMs.

Here, users can get an overview of which AI tools and LLMs are currently available on the market. Every user is free to submit a rating as well as share their experience with an AI application, and can switch directly to the provider via a further link.

KIFOX is not an online shop, but a comparison and information portal for AI applications.

ⓘ“Boost visibility in Google, ChatGPT, and beyond.”

Surfer is an SEO and AI visibility platform for planning, creating, optimizing, and monitoring content.

The product combines Content Editor, Topical Map, Content Audit, SERP Analyzer, Audit, as well as AI visibility tracking for systems such as ChatGPT, Perplexity, Google AI Overview, Google AI Mode, and Gemini. In addition, it includes AI writing features, internal linking, integrations, and team/workspace functions.Surfer

Boost visibility in Google, ChatGPT, and beyond

6.6/10 | KIFOX Score – Solid

Free Free tools such as Chrome Extension, AI Writing Tools, AI Detector, Humanizer, and courses; no fully featured permanently free version of the Surfer platform. Subscription Discovery Getting started with content creation and optimization, limited documents, page tracking, AI SEO guidelines, Surfy, and Humanizer.

Standard Unified SEO workflow, more documents, AI visibility tracking, AI prompts, integrations, brand knowledge, 1-click content optimization, and team collaboration.

Pro Everything in Standard plus more AI prompt tracking, multiple brand workspaces, internal linking, content ideas, coverage gap, templates, custom voices, and cannibalization report.

Peace of Mind Everything in Pro plus more unlimited optimization, more AI visibility tracking, API access, and VIP/scale features. Other Enterprise Customized packages with SSO, Enterprise Security, Advisory, Legal Onboarding Assistance, Early Access, Custom Limits, White-Label, Priority Support, and Team Onboarding.

AI Credits / Top-ups Additional AI credits can be added to active subscriptions.

– ★★★★★★★★★★ (0)

Link

GDPR: Partly GDPR assessment: Surfer AI / Surfer SEO is conditionally to well suited from a GDPR perspective.

Positive is that Surfer is a Polish provider based in Wrocław, explicitly mentions the GDPR in its Customer Privacy Policy, and describes a DPA mechanism for customer data directly in the privacy clause. Surfer specifies technical and organizational measures under Art. 32 GDPR, deletion/return rules, a list of subprocessors, and SCCs or appropriate transfer mechanisms for third-country transfers.

Negative is that subprocessors are not located exclusively in the EU; among others, Google Cloud Platform with EU/USA, Cloudflare globally, Stripe globally, as well as other providers with US ties are mentioned.

Server location: Not exclusively in the EU; Google Cloud Platform EU/USA and other global or US subprocessors are documented.

Privacy Policy

Link

ⓘ“Your AI note-taker is now also your Conversational Knowledge Engine”

Otter.ai is an AI meeting assistant that provides automatic transcription, meeting notes, summaries, action items, AI chat, and cross-meeting knowledge search. The tool integrates with Zoom, Microsoft Teams, Google Meet, and other platforms, turning conversations into searchable meeting data.Otter.ai

Your AI notetaker is now also your Conversational Knowledge Engine

6.7/10 | KIFOX Score – Solid

Free Free basic plan with integration with Zoom, Microsoft Teams, and Google Meet; AI chat; AI meeting workflows; limited audio/video import; live transcription; speaker recognition; audio playback; multilingual support; mobile apps; and a limited monthly transcription quota. Subscription Pro For individuals and small teams; includes more recording minutes, advanced AI workflows, monthly audio/video imports, longer meetings, advanced meeting templates, unlimited storage, Team Vocabulary, taggable speakers, advanced search, export, and playback.

Business For medium-sized teams; includes unlimited meetings and in-app recordings, custom AI workflows, unlimited audio/video imports, longer meeting durations, admin features, activity logs, usage analytics, multiple simultaneous meeting joins, and prioritized support.

Enterprise For large teams and enterprises; includes Business features plus unlimited custom AI workflows, Otter Sales Notetaker, custom integrations, SSO, SCIM, domain capture, enterprise security controls, HIPAA add-on, API, webhooks, video replay, and the Customer Success Program. Other API / Webhooks Enterprise-grade integration options for connecting Otter to CRM, dialer, project, and enterprise systems.

MCP Server Otter provides an MCP Server for connecting external AI workflows; access and governance depend on the plan and admin settings.

– ★★★★★★★★★★ (0)

Link

GDPR: Partly Overall assessment: Conditionally GDPR-compliant.

On the positive side, Otter.ai includes a Data Processing Agreement in its Terms of Service, defines its role as a data processor for enterprise customers, provides Standard Contractual Clauses (SCCs) and a UK Addendum for international data transfers, and publishes a list of subprocessors. Otter.ai is also certified under the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. DPF. Regarding user and meeting data, Otter states that customer data remains the property of the customer and that users can delete content; according to the Terms, no record of user content is retained after final deletion from the account.
Negative: Otter.ai is a U.S. provider headquartered in Mountain View, California. The Privacy Policy names AWS in the U.S. as the cloud service provider and notes cross-border processing outside the home country. Particularly relevant: According to the Privacy Policy, Otter.ai trains its own proprietary AI using de-identified audio recordings and transcriptions; manual review of specific audio data is to take place only with explicit consent. According to Otter, external AI service providers are not to use customer data for training and are not to store it permanently via API.

Server location: No guaranteed EU data residency as standard. Officially listed are AWS/cloud infrastructure, including the US; AWS data centers can be used worldwide. Conclusion: Suitable for standard business meetings, but for personal, confidential, or regulated conversations, it is recommended only with a DPA, SCC/DPF review, subprocessor review, a consent/notification policy for meeting participants, restrictive sharing settings, and clear deletion/retention rules.

Privacy Policy

Link

ⓘ“Building a world where we do more of what we love, while our humanoid companions handle the rest.”

1X develops humanoid robots for household and general physical work. The current flagship product, NEO, is a humanoid home robot featuring Redwood AI, LLM, audio/visual intelligence, app control, a voice interface, remote control options, and Scheduled Expert Mode for tasks the robot cannot yet perform autonomously.1X Technologies

Building a world where we do more of what we love, while our humanoid companions handle the rest.

5.8/10 | KIFOX Score – Limited

Subscription Standard – Monthly subscription with the Starter Productivity Package and Standard Delivery, as described on the order page.

Early Access – Ownership model with warranty, premium support, and priority delivery, as described on the order page. Other Refundable Deposit, Ownership, Subscription, Support/Priority Delivery, possibly future software/service enhancements.

– ★★★★★★★★★★ (0)

Link

GDPR: Partly Overall assessment: Unclear to conditionally GDPR-compliant.

On the positive side, 1X provides a Privacy Policy, describes data protection rights such as access, copying, rectification, erasure, restriction, objection, and withdrawal of consent, and mentions international data transfers with safeguards in accordance with applicable law. According to the official website, the Terms are subject to Norwegian law and the jurisdiction of Oslo, while the About page describes 1X as an AI and robotics company headquartered in Palo Alto, California. A negative aspect is that the publicly visible Privacy Policy is heavily focused on the website, communications, waitlists, orders, transactions, marketing, device/network data, cookies, and applications. However, particularly sensitive data is relevant to the practical operation of NEO: camera, microphones, visual environment, audio, memory, remote access, mobile app, Expert Mode, and robotics data. According to the product page, NEO features dual stereo cameras, four beamforming microphones, Wi-Fi, Bluetooth, and 5G; additionally, NEO can be controlled remotely via app/VR, and 1X Experts can remotely assist with scheduled tasks.

Server location: No verified information on EU hosting or EU data residency is available. The Privacy Policy states that personal data may be transferred to affiliated companies and service providers in the U.S. and other jurisdictions.

BPA/DPA: No publicly available GDPR-compliant BPA/DPA, no complete list of subprocessors, and no robot-specific EU data protection documentation found: No reliable information available.

Conclusion: For private use in the U.S., NEO is positioned as an early-access household robot. For Germany/the EU, its compliance with the GDPR cannot currently be reliably assessed. Before use, the following should be checked in particular: CE/product safety status, DPA, third-country transfers, camera/audio consent, remote access by 1X Experts, memory function, deletion, cloud storage, app data, and network data.

Privacy Policy

Link

ⓘ“The Global Leader in Social Humanoid Robotics” / “Engineering the world’s most advanced social humanoid robots.”

Engineered Arts develops and builds humanoid robots for social interaction, entertainment, education, research, events, and public installations. The flagship Ameca is a full-scale, interactive, and programmable humanoid robot equipped with cameras, microphones, speakers, and 61 degrees of freedom. All current robots are operated via the Tritium software platform.Engineered Arts

The Global Leader in Social Humanoid Robotics" / "Engineering the world's most advanced social humanoid robots.

7.2/10 | KIFOX Score – Good

Other Purchase on request, rental/rental on request, customized configurations, Tritium AI Subscription, maintenance/support and optional warranty extensions. Direct prices are not given here as no verified official standard price list was found. Ameca: CE publicly named. The official Ameca spec page states "Certifications: CE".

– ★★★★★★★★★★ (0)

Link

GDPR: Partly Overall assessment: Engineered Arts can generally be used by EU customers in compliance with the GDPR, but only after a case-by-case review and a review of the contract. Main reason: The robots process potentially personal audio/video data via microphones, cameras, telepresence, WebRTC, cloud services, and remote support. According to official documentation, Ameca contains microphones, cameras, and speakers for two-way audiovisual interaction; additionally, Tritium is a web-based platform with cloud services / Tritium AI.

Positive: Engineered Arts operates a Trust Center and demonstrates GDPR and CCPA compliance there. Additionally, the company is based in the United Kingdom; for data transfers from the EEA to the UK, there is currently an EU Adequacy Decision in place, which, according to the ICO, is valid until December 27, 2031. This means that pure EEA→UK transfers are generally possible without additional transfer safeguards.

Negative / open issues: No publicly available, verified, complete information is available regarding a retrievable DPA, specific retention periods, training exclusions, zero-retention commitments, detailed purposes of processing, recording options, EU-only operations, or complete sub-processor agreements. The documentation also indicates that remote access is possible or recommended for support and operations; among other things, it mentions outbound support access for command-line access and software downloads.

Server location: Not strictly EU/EEA. For tritiumrobot.cloud, Engineered Arts lists three regions: EMEA London, AMER Oregon, and APAC Singapore; access is provided via latency-based DNS routing. This makes UK processing plausible, but routing/processing outside Europe is also technically provided for.

Engineered Arts Trust Center

Link

ⓘ“The future of home care is here”

Figure AI develops electrically powered humanoid robots designed to perform human tasks in industrial, logistics, and—in the future—domestic environments. Figure 02 was tested at BMW Spartanburg in a real production environment; Figure 03 is more focused on domestic use, Helix AI, safety, and mass production.Figure.AI

The future of home help is here

3.7/10 | KIFOX Score – Insufficient

Other Enterprise/pilot/partner projects on request. Industrial and commercial partnerships, such as BMW and Catalyst Brands, are documented; public purchase, rental or leasing conditions are not guaranteed.

– ★★★★★★★★★★ (0)

Link

GDPR: Unclear Overall assessment:Figure AI is a U.S.-based provider headquartered in San Jose, California. On the positive side, Figure provides an up-to-date Privacy Policy, describes data protection rights, lists physical, technical, organizational, and administrative security measures, and explains that data may be used in anonymized or aggregated form for analysis, to develop and improve services, without directly identifying users.

On the negative side, depending on usage, Figure may also collect sensory data, including photos, videos, or recordings of individuals and/or their surroundings. The Privacy Policy also lists service providers, hosting/technology providers, analytics providers, advertising partners, support providers, and parties that users authorize. For EU customers, no publicly available information was found regarding a GDPR DPA, EU representative, standard contractual clauses, a complete list of subprocessors, or EU data residency: No verified information available.

Server location: No verified information regarding EU hosting is available. The Terms state that the service is controlled, operated, and administered from the U.S.

Conclusion:
For industrial pilot projects such as BMW, Figure is technically very relevant, but from a data protection perspective, it is only suitable for the German market after a case-by-case review. If used in Germany, at a minimum, an AVV/DPA, third-country transfer assessment, robot sensor concept, camera/audio concept, deletion/retention rules, access controls, CE/machine safety assessment, and company agreements would be required.

Privacy Policy

Link

ⓘ“Cognitive Robotics – A New Era of Human-Robot Collaboration”

NEURA Robotics develops humanoid, collaborative, and cognitive robots for industry, logistics, research, service, and, in the future, the home. 4NE1 combines mobility, sensor skin, environmental perception, multimodal AI, voice interaction, and interchangeable or dexterous hands. The platform is designed for collaboration with humans and for tasks in real-world, non-fully-structured environments.NEURA Robotics

Cognitive Robotics – A New Era of Human-Robot Collaboration

6.1/10 | KIFOX Score – Solid

Other Hardware purchases, reservations, volume discounts, customized corporate offers, pilot projects, integration, support, and project-specific configurations. Separate reservation models are available for MiPA and 4NE1.

– ★★★★★★★★★★ (0)

Link

GDPR: Yes Overall Assessment:

On the positive side, NEURA Robotics is a German limited liability company (GmbH) based in Metzingen and provides a detailed privacy policy in accordance with the GDPR. NEURA Robotics GmbH, located at Gutenbergstraße 44, 72555 Metzingen, is listed as the data controller. The privacy policy describes the legal basis, data subject rights, data portability, the right to object, erasure, and the routine blocking or erasure of personal data once the purpose of processing no longer applies or statutory retention periods have expired. Google Analytics with IP anonymization via Google Ireland is used for the website.

A negative aspect is that the publicly accessible privacy policy primarily covers website and business contact processing. For the operation of 4NE1, there is a lack of publicly available detailed information regarding camera, microphone, sensor, motion, teleoperation, digital twin, and training data. A publicly accessible data processing agreement, a complete list of subprocessors, a specific cloud region, a binding non-training commitment for customer data, and product-specific retention periods were also not found: No verified information is available.

Server location: No specific server location is specified for the website or general corporate processing. For Neuraverse, NEURA Sync, Digital Twin, teleoperation, or NEURA Gym, no verified hosting regions are publicly available.

Conclusion: As a German provider, NEURA offers a better starting point in terms of data protection than many non-European robotics manufacturers. Before productive use, however, companies should still request a DPA and clarify the processing of camera, audio, telemetry, digital twin, and training data. Additionally required are a data protection impact assessment for extensive personal monitoring, a role and authorization concept, retention periods, network segmentation, and an audit of the cloud and AI services used.

Data Protection Provisions

Link

ⓘ“Empowering Every Home with Robotics”

Noetix Robotics develops compact and full-size humanoid robots for education, research, entertainment, developers, corporate demonstrations, and, in the future, private households. Bumi is positioned as a lightweight entry-level and educational robot, N2 focuses more on dynamic movement and research, and E1 on voice interaction, service, and embodied AI.Noetix Robotics

Empowering Every Home with Robotics

3.6/10 | KIFOX Score – Insufficient

Other Hardware purchases, product variants such as Pro and EDU, customized sales offers, configurations for education and research, optional computing modules, as well as support and warranty services.

– ★★★★★★★★★★ (0)

Link

GDPR: No Overall assessment:

On the positive side, Noetix provides a privacy policy in English, lists technical and organizational safeguards, and states that it stores data only for necessary purposes. After the retention period expires or upon a request for deletion, data is to be securely deleted or anonymized. Noetix also states that it does not sell personal data or make it available to third parties for unrestricted use.

On the negative side, the privacy policy explicitly applies only to the website at noetixrobotics.com. It does not sufficiently describe data processing related to robots, smartphone controls, language models, cameras, microphones, OTA updates, or SDKs. The website uses, among other things, Google Analytics/Ads, Facebook Pixel, LinkedIn Insight Tag, Bing Pixel, Reddit Pixel, and Criteo.

Server location: Noetix explicitly states that it stores personal data within China. No EU data residency is indicated.

DPA, SCCs, and EU Representative: A publicly available data processing agreement, EU Standard Contractual Clauses, an EU representative, a complete list of subprocessors, and a European Data Protection Officer were not found: No verified information available.

Conclusion: From a GDPR perspective, Noetix must be viewed critically regarding personal data, camera or audio recordings, and use in schools, households, or publicly accessible spaces. Prior to procurement, a product-specific privacy policy, data processing agreement, transfer impact assessment, SCCs, telemetry and deletion policy, as well as clear statements regarding language model, camera, and training data are required.

Privacy Policy

Link

ⓘOptimus is Tesla’s humanoid robotics platform designed for physical tasks in factories and, in the future, in homes. Tesla is developing software for balance, navigation, perception, and physical interaction. The robot is not currently available for purchase by the general public.Tesla

general-purpose, bipedal, autonomous humanoid robot

3.2/10 | KIFOX Score – Insufficient

– ★★★★★★★★★★ (0)

Link

GDPR: Unclear Overall assessment:

On the positive side, Tesla has a comprehensive general privacy policy. For individuals in the EEA, the United Kingdom, and Switzerland, Tesla International B.V. in the Netherlands is designated as the data controller. Tesla identifies a data protection officer, outlines data subject rights, provides options for erasure, describes technical and organizational security measures, and references EU Standard Contractual Clauses for international transfers. Tesla also states that it does not sell personal data.

On the negative side, the publicly available privacy policy mainly refers to vehicles, energy products, websites, accounts, and existing Tesla services. A specific privacy policy for Optimus, its cameras, microphones, telemetry, remote control, training data, or operating environment has not been published: No verified information available.

Server location: Tesla is a global company and may transfer personal data to the U.S. and other countries. For European data, Tesla refers to standard contractual clauses and technical and organizational safeguards. A specific EU data residency for Optimus is not specified.

Training on customer data: Tesla describes, in part, local camera processing for vehicles and consent-based data sharing for fleet learning. These statements cannot be automatically applied to Optimus. There is no publicly available Optimus-specific non-training commitment.

DPA: No publicly available, product-specific DPA template exists for future enterprise use of Optimus: No verified information is available.

Conclusion: Tesla generally has established GDPR processes, SCCs, and a European data controller. However, a robust GDPR assessment for Optimus will only be possible once Tesla publishes specific product terms, data flows, storage locations, retention policies, training usage, and contractual documents.

Customer Privacy Notice

Link

ⓘ“The #1 framework for AI-generated electronics.”

tscircuit is an open-source, code-based EDA framework that allows you to describe schematics and PCBs in React and TypeScript. From the code, the system generates schematic, PCB, 3D, and manufacturing views, among other things. AI assistants can interpret requirements, search for components, and generate the necessary tscircuit code.tscircuit

The #1 framework for AI-generated music

5.9/10 | KIFOX Score – Limited

Free The core is open-source under the MIT license and can be used locally via the CLI or as a TypeScript/React framework. This enables full-fledged circuit design, PCB layout, simulation, and export workflows. Other PCB Hosting and Ordering Service Hosting and ordering of printed circuit boards, circuit modules, schematics, 3D models, and other electronics assets.

Private Registry Use of a custom npm-compatible registry for internal components, files, and team collaboration.

External AI Providers AI requests can be processed via OpenAI and Anthropic; potential costs and quotas depend on the specific integration.

– ★★★★★★★★★★ (0)

Link

GDPR: Partly Overall assessment:

On the positive side, tsCircuit has published a detailed privacy policy that outlines the legal basis for EU users, data subject rights, account deletion, and technical and organizational security measures. Personal data is generally only stored for as long as an active account exists or as required by legal obligations. Users can request access, correction, or deletion via a dedicated privacy form.

On the negative side, tsCircuit Inc. is headquartered in San Francisco, and according to the Terms of Service, the services are hosted in the U.S. When using the AI features, inputs, outputs, and, where applicable, personal data are shared with external AI service providers. The privacy policy explicitly names OpenAI and Anthropic as AI service providers. Additionally, cloud, storage, analytics, authentication, and payment service providers may be used.

Server location: USA for the hosted services. A publicly available DPA for European business customers, EU data residency, standard contractual clauses, or a complete list of subprocessors by name were not found: No reliable information available.

Conclusion: tsCircuit is well-suited for public open-source projects and non-confidential electronic designs. For proprietary circuits or personal data, it is preferable to work locally, use a private package registry, and review the external AI integration separately. Confidential project details should not be transmitted to the integrated AI chat without prior review.

PRIVACY POLICY

Link

ⓘ“EDA’s premier code-based, AI-driven PCB design tool.”

JITX is a code-based platform for the development and optimization of complex printed circuit boards, particularly high-frequency systems. Requirements are described in Python; AI can generate or revise the code. JITX uses this to generate schematics and layouts, employs routing and optimization methods, and can initiate and evaluate electromagnetic simulations using Ansys HFSS.JTIX

Software-defined electronics

6.2/10 | KIFOX Score – Solid

Free Permanent free access to designs under the CERN OHL Permissive License; unlimited design complexity, routine automation, technical design checks, and component optimization. Other Enterprise Locally hosted platform for proprietary designs, choice of design license, PLM integration, KiCad, Altium, and Siemens Expedition connectivity, air gap, and dedicated support.

Trial / Demo / Training Customized demonstrations, trial accounts, and training programs.

Consulting Consulting for automated hardware design and implementation of the JITX methodology.

Custom Development Custom development, company-specific design libraries, verification rules, and integrations.

– ★★★★★★★★★★ (0)

Link

GDPR: Partly Overall assessment:
Conditional; well-controlled in locally hosted enterprise environments.

A positive aspect is that JITX offers enterprise customers a locally hosted and air-gapped installation. This allows proprietary designs to be processed within the customer’s own IT infrastructure without requiring design data to be transferred to a public US cloud. JITX treats customer data as confidential information in its Terms of Service.

A negative aspect is that the general JITX services are hosted in the U.S. The privacy policy mentions Google Analytics, FullStory, and HubSpot; the website may collect device and interaction data, including form interactions. Personal data may be stored in the U.S. and transferred from there to other countries.

Server location: U.S. for general hosted services; local customer infrastructure for the Enterprise model. No publicly available GDPR DPA, EU hosting, SCC document, or complete list of subprocessors was found: No verified information available.

Training on customer data: JITX has published research on the use of external LLMs such as Claude, Gemini, and GPT for PCB code. No general public commitment stating that customer designs are never used for AI training was found. In local or air-gapped operations, this risk can be significantly reduced from a technical standpoint.

Conclusion: For GDPR- and IP-critical hardware projects, enterprise operation on proprietary infrastructure is the most sensible option. The browser-based website and marketing services should be evaluated separately from the actual local design environment.

PRIVACY POLICY

Link

ⓘ“The only E-CAD software with AI support.”

ELECTRIX AI is a professional E-CAD platform for electrical engineering, control panel design, fluid technology, process engineering, electrical installation, and building automation. The integrated AI copilot provides support for bill of materials, terminal diagrams, macro placement, translations, technical assistance, requirements checking, and the creation of control cabinet layouts, among other features.Electrix WSCAD

The only AI-powered E-CAD software

6.8/10 | KIFOX Score – Solid

Free Full trial access including all six engineering disciplines, add-ons, interfaces, and AI features.

ELECTRIX Education Free license for verified universities and educational institutions. Subscription ELECTRIX AI Rental License
Time-limited license with updates; standard term is one year according to the provider, with additional multi-year contract options available. Other ELECTRIX AI Purchase License Perpetual license for the E-CAD software.

Maintenance and Support Software updates, support, and access to the WSCAD parts database.

Engineering Modules Electrical Engineering, Cabinet Engineering, P&ID, Fluid Engineering, Electrical Installation, and Building Automation.

Add-ons ProjectWizard, Automation, Interfaces, Manufacturing Integration, and other add-on modules.

Consulting and Training Onboarding, project consulting, training, and video tutorials via WSCADEMY.

– ★★★★★★★★★★ (0)

Link

GDPR: Yes Overall assessment:
Well-suited for GDPR compliance, subject to the specific license and cloud configuration.
A positive aspect is that WSCAD is a German GmbH based in Bergkirchen. Regarding ELECTRIX AI, WSCAD explicitly states that neither personal data nor IP addresses are shared, project content is not stored or transferred to third parties, and inputs to the AI Copilot are end-to-end encrypted. The chat history is automatically deleted after each session. According to WSCAD, engineering and control cabinet AI run locally on the workstation or the customer’s infrastructure. The automatic control cabinet agent is designed to operate entirely locally and learn from customer projects without transferring engineering data to an external cloud. A hybrid approach is used for functions such as translations.

Server location: Central engineering and project files can be stored locally or on the corporate network. For optional online functions such as translations or wscaduniverse.com, no uniform data region is documented for all operations.

AVV/DPA: A publicly available, specific AVV for ELECTRIX AI was not found. Since essential project processing takes place locally, not every function necessarily involves data processing on behalf of a client. However, the contractual situation should still be reviewed for cloud, support, or translation functions.

Conclusion: ELECTRIX AI is among the more privacy-friendly engineering AI solutions because, according to the provider, sensitive project data remains local. Companies should nevertheless document the specific network, translation, support, and online library configurations.

WSCAD Privacy Policy

Link

ⓘ“Engineering-Grade Agentic AI for Electrical Design Calculations.”

ELEK is a suite of professional calculation programs for electrical power systems. It covers, among other things, low-voltage cables, high-voltage cables, grounding systems, cable pulling, protection coordination, and other electrical engineering calculations. ELEK AI enhances selected applications with natural language, agent-based support and automated data extraction.ELEK AI

Engineering-Grade Agentic AI for Electrical Design Calculations

6.4/10 | KIFOX Score – Solid

Free ELEK AI offers a free plan with a limited number of monthly credits. In addition, there are free calculators and trial options available. The full professional engineering products are not offered as permanently free full versions. An active, compatible product is required for AI calculations. Subscription ELEK AI Individual Personal access with a regular AI credit allowance for one person.

ELEK AI Team Shared credit allowance for multiple employees.

Cable Pro Web Cloud-based license with monthly or annual renewal. Other AI Credit Top-ups One-time additional credit packages; active subscription required.

PC Software Licenses Licenses for Cable High Voltage, SafeGrid, Cable Pulling, Protection Coordination, and Line Rate.

SELEK Power Bundle Bundle of multiple programs for electrical networks, cables, grounding, and protection calculations.

Network License Shared use of selected PC packages in larger or distributed teams.

Updates and Support Optional maintenance, update, and support services for PC software after the first year of licensing.

– ★★★★★★★★★★ (0)

Link

GDPR: Partly Overall Assessment:
A positive aspect is that ELEK has published a globally applicable privacy policy that explicitly addresses the GDPR, Australian Privacy Principles, and other international regulations. The company designates a data protection contact, a DPO, and an EU contact person. Third-party providers are required to enter into Data Processing Agreements.

For ELEK AI, the provider explicitly states that third-party AI services are not permitted to use project data for model training. Project inputs and calculation results must remain within the controlled ELEK software environment.

A negative aspect is that ELEK Software is based in Sydney, Australia, and uses third-party providers outside of Australia and the EEA. According to the Security Policy, the primary cloud location is at AWS in Sydney. No EU data residency is specified. ELEK merely states that it adheres to ISO/IEC 27001 principles; this does not constitute proof of ISO 27001 certification.

Deletion: Users can modify, export, or delete data. Following a request to close an account, cloud user data is to be deleted within 90 days.

DPA: According to its own policy, ELEK requires DPAs from its service providers. No public DPA for customers was found: No verified information available.

Conclusion: For EU companies, local PC software is more privacy-friendly than Cable Pro Web or other cloud features. When using cloud and AI services, international data transfers, data processing agreements, AWS regions, and retention periods should be documented.

Privacy Policy

Link

ⓘ“AI for scientific research.”

Elicit is an AI-powered research assistant designed to search for, review, evaluate, and synthesize scientific literature. The tool supports basic literature searches, automated research reports, and systematic reviews, including screening, data extraction, and citation management. All key AI statements are to be linked to text passages from the underlying publications.Elicit

AI for scientific research.

7.6/10 | KIFOX Score – Good

Free Limited Research Agent, monthly limited automated reports, unlimited search across more than 138 million publications, unlimited abstracts, Paper-Chat when full text is available, source display, and Zotero import. Subscription Plus Includes Basic features plus expanded access to the Research Agent, more automated reports, export to RIS, CSV, BIB, PDF, and DOCX, larger extraction tables, and clinical trial search.

Pro For systematic reviews; includes an advanced Research Agent, a dedicated review workflow, higher screening and report quotas, research alerts, custom extraction from uploads, explanations for AI responses, output templates, and API access.

Scale For collaborative research teams; includes Pro features plus full Research Agent access, image interpretation, real-time collaboration, larger reports and tables, and an admin panel with usage and seat management.

Enterprise For corporations, universities, and research institutions; includes SSO/SAML, 2FA, domain verification, user analytics, custom deployments, single-tenancy options, custom data sources and templates, higher review limits, unlimited alerts and API usage, and no training on customer data by default. Other Elicit API API access is available starting with the Pro plan; reports and reviews generated via the API count toward the respective workflow quota. According to the documentation, systematic reviews via the API are reserved for Enterprise plans.

Institutional Agreements Custom contracts for universities, research groups, and companies, including onboarding, training, customer success, and customized data sources.

– ★★★★★★★★★★ (0)

Link

GDPR: Yes Overall assessment:
Conditionally to well suited for GDPR compliance, particularly in the enterprise contract. A positive aspect is that Elicit provides a public Data Processing Addendum that governs the processing of customers’ personal data as a data processor. The DPA incorporates the EU Standard Contractual Clauses, supports controller-to-processor and processor-to-processor transfers, requires subprocessors to implement comparable safeguards, and mandates notification of data breaches within 72 hours of discovery at the latest. Elicit also publishes a list of subprocessors and enables notifications regarding changes.

Other positive features include SOC 2 controls, encryption in transit and at rest, regular penetration tests and vulnerability scans, as well as security monitoring via AWS GuardDuty and Cloudflare WAF. Elicit explicitly states that it does not use enterprise user data for model training; contracts with external providers such as OpenAI are also intended to preclude the use of this data for training.

A negative aspect is that Elicit is operated by the U.S.-based Elicit Research, PBC, and international data transfers may be required. No binding EU data residency or publicly documented European standard data center location was found: no verified information is available. The DPA uses SCCs for limited third-country transfers and designates Irish law and Irish courts for the EU standard contractual clauses.

For Basic, Plus, Pro, and Scale, the official pricing page does not include a general non-training commitment as clear as that for Enterprise. No reliable information is available as to whether all uploaded content from all standard plans is generally excluded from training. Particularly sensitive, unpublished, or personal research documents should therefore preferably be processed via contractually verified Enterprise access.

Conclusion: Elicit can be used in compliance with the GDPR through a DPA, SCCs, an Enterprise contract, access controls, and vetting of subprocessors. For health data, unpublished research, trade secrets, or special categories of personal data, a data protection impact assessment and documented approval should also be conducted.

Privacy Policy

Data Processing Addendum

Link

ⓘ"Create Videos Without Limits" / "Turn any idea into videos. Ads, explainers, stories, anything you can imagine."

invideo AI is an AI video platform for prompt-to-video, AI Video Generator, AI Avatars, image-to-video, UGC Ads, AI Animation, AI Ad Generator, Video Translator, Voice Cloning, subtitles, image generation, and classic video editing via invideo Studio.invideo AI

Turn any idea into videos. Ads, explainers, stories, anything you can imagine.

5.8/10 | KIFOX Score – Limited

Free Free use without a credit card; limited access to AI models, weekly reset quota, exports with the InVideo logo and stock media watermark. Subscription Plus Paid entry-level plan for exploratory use; access to paid AI/video features, credits, stock providers, and watermark removal compared to Free.

Max Expanded plan for occasional or more intensive use with a larger credit allowance than Plus and access to the paid-plan features.

Generative Plan for daily use of generative models; according to the Help Center, particularly relevant when Plus/Max credits are quickly used up through regular video generation.

Enterprise Customized enterprise offering with private/secure workflows, SOC 2/ISO alignment, GDPR compliance, Context Engine, Custom Agents, Eval & Quality, Parallel Generation, Data Isolation, Audit Trails, Access Controls, IP protection, and a no-training commitment. Other Credits Credits are the internal currency for media clips, videos, generative models, and AI features; downloads/exports do not consume credits, and according to the Help Center, unused credits do not roll over to the next month.

redit Add-ons If credits are used up, users can, according to the Help Center, purchase one-time credit add-ons or switch to a higher plan.

Third-party models Paid Plans include access to many image, video, audio, and music models; model and agent pricing may change and is partly based on provider pricing.

invideo Studio Separate classic video editor with a timeline/template workflow; not identical to invideo AI.

– ★★★★★★★★★★ (0)

Link

GDPR: Partly Overall assessment: Conditionally GDPR-suitable; for companies, better evaluated via Enterprise.

Positive is that InVideo provides a Privacy Policy with information on data categories, legal bases, deletion, data portability, security, SSL/TLS encryption, and global processing. The Enterprise page mentions “Private & Secure,” “SOC 2 & ISO Aligned,” “GDPR Compliant,” data isolation, audit trails, access controls, full rights to generated content, as well as the commitment that Enterprise inputs and outputs are not used to train its own or external models.

Negative is that the general Privacy Policy refers to global data transfer, storage, and processing and does not specify concrete EU data residency. According to the Privacy Policy, InVideo is offered by Whitesheep Technology Private Limited in India and Invideo Innovation Pte. Ltd. in Singapore; additionally, a US entity is mentioned. The Terms allow InVideo to use AI Based Output to improve AI safety measures, technologies, products, and services. A publicly fully accessible AVV/DPA, complete subprocessor list, or specific EU server region could not be reliably found in the reviewed sources; a Trust Center exists, but its content was not fully readable through the public query.

Server location: global / no specific region reliably confirmed.

Conclusion: Well suited for general marketing and social video production; for personal, confidential, or regulated content, Enterprise should be reviewed with regard to DPA/AVV, subprocessors, data region, non-training commitment, and deletion process.

Privacy Policy

Link

ⓘ“The home of the AI Workforce” / “Scale GTM results, without scaling headcount”

Relevance AI is a low-/no-code platform for building, orchestrating, and operating AI agents and multi-agent workforces. The current focus is strongly on go-to-market processes such as sales, marketing, CRM enrichment, outbound, inbound qualification, customer success, and support automation.Relevance AI

The home of the AI Workforce / Scale GTM results, without scaling headcount

7.8/10 | KIFOX Score – Good

Free Free entry-level plan for creating, cloning, and testing agents; includes unlimited agents & tools, Chat to Invent Changes, 2,000+ integrations, one workforce, one user, one project, 30 days of task history, marketplace access, community forum, as well as SOC 2/GDPR information. Subscription Pro For GTM operators and engineers who want to use agents more productively; includes everything in Free plus unlimited Workforces, two Build Users, scheduled Tasks, Chat Mode, Smart Escalations, Activity Center, Premium App Triggers, and Bring Your Own LLM.

Team For teams with larger workloads; includes everything in Pro plus Credit Rollover, five Build Users, End Users, multiple Shared Projects, Calling & Meeting Agents, A/B Testing, Analytics Dashboard, and Priority Support.

Enterprise Custom enterprise plan with unlimited users and projects, Enterprise App Triggers, Agent Evaluations, Work Hour Controls, Multi-Org Management, Enterprise Security, Dedicated Account Manager, Custom Implementation, and Priority Early Access. Other Actions Usage units for agent and workflow executions; different monthly or annual quotas are included depending on the plan.

Vendor Credits Prepaid/quota model for third-party AI model usage; according to the Terms, Vendor Credits can be used for Third-Party-AI-Model-Usage and are tied to an active subscription.

Bring Your Own LLM Users can connect their own LLM accounts or API keys, for example for OpenAI, Anthropic, or Google; processing then additionally depends on the respective provider and its DPA/Terms.

Enterprise Data Retention Enterprise feature for the automatic control of the retention and deletion of Tool Runs, Agent Conversations, Workforce Tasks, and Asset Versions; according to the documentation, it must be activated by Relevance AI.

– ★★★★★★★★★★ (0)

Link

GDPR: Yes Overall assessment: Conditionally to well suited for GDPR, depending on the plan, region, and integrations. Relevance AI cites GDPR compliance, SOC 2 Type II, encryption in transit and at rest, SSO/MFA via identity providers for enterprise customers, RBAC, fine-grained access control, audit/security documentation, and a list of subprocessors in the Trust Center.

Another positive is that, according to Relevance AI’s security documentation, Relevance AI does not train models on customer data and stores agent conversations as well as knowledge data in the region selected by the customer. For enterprise customers, security questionnaires and additional compliance documentation are offered under NDA; the website also mentions DPA templates in the Trust Center.

The negative is: Relevance AI is operated by OnSearch Pty Ltd, an Australian company; the general privacy policy includes EU/UK-specific rights, but does not make a blanket statement that all processing takes place exclusively in the EU. External integrations and LLM steps may involve third-party providers whose own privacy and processing terms also apply.

Server location: Relevance AI describes multi-region deployment and storage in the selected region; specific default regions or automatically guaranteed EU data residency are not publicly and unambiguously assured for every plan. For GDPR-critical use, the enterprise plan, DPA/data processing agreement, region selection, list of subprocessors, BYO-LLM/LLM provider review, retention settings, and access controls should be verified in a binding manner. Sources: Relevance AI Privacy Policy, Security Overview, Data Security Policy, and Pricing.

Privacy Policy

Link